Palo Alto Networks and Aruba Networks have each announced patches for severe vulnerabilities affecting their products.
Anticipation and Action: What’s Next in SOC Modernization
“Wisdom consists of the anticipation of consequences.” – Norman Cousins
Microsoft Warns of New Zero-Day; No Fix Yet For Exploited Exchange Server Flaws
Microsoft on Tuesday released software fixes to address more than 90 security defects affecting products in the Windows ecosystem and warned that one of the vulnerabilities was already being exploited as zero-day in the wild.
Patch Tuesday: Critical Flaws in ColdFusion, Adobe Commerce
Software maker Adobe on Tuesday released security patches for 29 documented vulnerabilities across multiple enterprise-facing products and warned that hackers could exploit these bugs to take complete control of vulnerable machines.
Endor Labs Joins Race to Secure Software Supply Chain
It’s officially a venture capital funding frenzy in the software supply chain security space.
Former Uber CISO Joe Sullivan Found Guilty Over Breach Cover-Up

A San Francisco jury on Wednesday found former Uber security chief Joe Sullivan guilty of covering up a 2016 data breach and concealing information on a felony from law enforcement.
Quantum-Safe Communications Startup Qunnect Raises $8 Million
Quantum-secure networking devices maker Qunnect this week announced raising $8 million in a Series A funding round that brings the total investment in the company to $12.4 million.
The new investment round was led by Airbus Ventures, with additional participation from Impact Science Ventures, Motus Ventures, NY Ventures, Quantonation, and SandboxAQ.
KKR Boosts NetSPI Stake with $410 Million Investment
Private equity giant KKR is expanding its big bet on penetration testing and attack surface management firm NetSPI with a new $410 million investment round.
DHS Tells Federal Agencies to Improve Asset Visibility, Vulnerability Detection
The Cybersecurity and Infrastructure Security Agency (CISA) this week published Binding Operational Directive 23-01 (BOD 23-01), which requires federal agencies to take the necessary steps to improve their asset visibility and vulnerability detection capabilities within the next six months.













